4.3

CVE-2010-0648

Exploit

Mozilla Firefox, possibly before 3.6, allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href property value, related to an IFRAME element.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version <= 3.5.7
Mozilla ≫ Firefox Version1.0
Mozilla ≫ Firefox Version1.0 Updatepreview_release
Mozilla ≫ Firefox Version1.0.1
Mozilla ≫ Firefox Version1.0.2
Mozilla ≫ Firefox Version1.0.3
Mozilla ≫ Firefox Version1.0.4
Mozilla ≫ Firefox Version1.0.5
Mozilla ≫ Firefox Version1.0.6
Mozilla ≫ Firefox Version1.0.7
Mozilla ≫ Firefox Version1.0.8
Mozilla ≫ Firefox Version1.5
Mozilla ≫ Firefox Version1.5 Updatebeta1
Mozilla ≫ Firefox Version1.5 Updatebeta2
Mozilla ≫ Firefox Version1.5.0.1
Mozilla ≫ Firefox Version1.5.0.2
Mozilla ≫ Firefox Version1.5.0.3
Mozilla ≫ Firefox Version1.5.0.4
Mozilla ≫ Firefox Version1.5.0.5
Mozilla ≫ Firefox Version1.5.0.6
Mozilla ≫ Firefox Version1.5.0.7
Mozilla ≫ Firefox Version1.5.0.8
Mozilla ≫ Firefox Version1.5.0.9
Mozilla ≫ Firefox Version1.5.0.10
Mozilla ≫ Firefox Version1.5.0.11
Mozilla ≫ Firefox Version1.5.0.12
Mozilla ≫ Firefox Version1.5.1
Mozilla ≫ Firefox Version1.5.2
Mozilla ≫ Firefox Version1.5.3
Mozilla ≫ Firefox Version1.5.4
Mozilla ≫ Firefox Version1.5.5
Mozilla ≫ Firefox Version1.5.6
Mozilla ≫ Firefox Version1.5.7
Mozilla ≫ Firefox Version1.5.8
Mozilla ≫ Firefox Version2.0
Mozilla ≫ Firefox Version2.0.0.1
Mozilla ≫ Firefox Version2.0.0.2
Mozilla ≫ Firefox Version2.0.0.3
Mozilla ≫ Firefox Version2.0.0.4
Mozilla ≫ Firefox Version2.0.0.5
Mozilla ≫ Firefox Version2.0.0.6
Mozilla ≫ Firefox Version2.0.0.7
Mozilla ≫ Firefox Version2.0.0.8
Mozilla ≫ Firefox Version2.0.0.9
Mozilla ≫ Firefox Version2.0.0.10
Mozilla ≫ Firefox Version2.0.0.11
Mozilla ≫ Firefox Version2.0.0.12
Mozilla ≫ Firefox Version2.0.0.13
Mozilla ≫ Firefox Version2.0.0.14
Mozilla ≫ Firefox Version2.0.0.15
Mozilla ≫ Firefox Version2.0.0.16
Mozilla ≫ Firefox Version2.0.0.17
Mozilla ≫ Firefox Version2.0.0.18
Mozilla ≫ Firefox Version2.0.0.19
Mozilla ≫ Firefox Version2.0.0.20
Mozilla ≫ Firefox Version3.0
Mozilla ≫ Firefox Version3.0.1
Mozilla ≫ Firefox Version3.0.2
Mozilla ≫ Firefox Version3.0.3
Mozilla ≫ Firefox Version3.0.4
Mozilla ≫ Firefox Version3.0.5
Mozilla ≫ Firefox Version3.0.6
Mozilla ≫ Firefox Version3.0.7
Mozilla ≫ Firefox Version3.0.8
Mozilla ≫ Firefox Version3.0.9
Mozilla ≫ Firefox Version3.0.10
Mozilla ≫ Firefox Version3.0.11
Mozilla ≫ Firefox Version3.0.12
Mozilla ≫ Firefox Version3.0.13
Mozilla ≫ Firefox Version3.0.14
Mozilla ≫ Firefox Version3.0.15
Mozilla ≫ Firefox Version3.5
Mozilla ≫ Firefox Version3.5.1
Mozilla ≫ Firefox Version3.5.2
Mozilla ≫ Firefox Version3.5.3
Mozilla ≫ Firefox Version3.5.4
Mozilla ≫ Firefox Version3.5.5
Mozilla ≫ Firefox Version3.5.6
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.44% 0.602
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.